Effective July 31, 2026

Privacy Policy

FluxVision stores the account and project data needed to operate the workspace: your name, email, OAuth account links, revocable sessions, uploaded media, generation inputs, job status, entitlement records, usage ledgers, and hashed API keys.

How data is used

Account data authenticates you and enforces quotas. Uploaded media and prompts are used only to process the generation you request. When a generation provider is configured, the prompt and related job data are sent to that provider under the operator’s agreement.

Storage and retention

Structured domain and identity records are stored in PostgreSQL through Cloudflare Hyperdrive, while media objects are stored in private Cloudflare R2. Deleting a project, asset, or result hides it immediately and queues its R2 objects for retryable removal. Copies processed by a generation provider remain subject to that provider’s disclosed retention terms when it offers no deletion API.

Security and choices

Web authentication uses configured Google or Apple OAuth through Better Auth. Device and API secrets are stored as hashes, and project access is workspace-scoped. Account deletion immediately revokes sessions, device tokens, API keys, and linked provider credentials. The background workflow deletes personal-workspace media and anonymizes identity data; shared team content, billing facts, and audit records stay with their workspace or for legally required retention.

Contact

For privacy questions or an account-data request, email support@fluxvision.ai.